The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119317: Tenable, Inc. Plugin Feed: On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the…6.5 Medium6.0 Medium0%Oct 29, 2026
CVE-2026-119286: graphql-python graphql-core: GraphQL-core is a Python port of the GraphQL.js reference implementation7.5 HighN/A0%Oct 29, 2026
CVE-2026-119285: gofiber fiber: Fiber is an Express inspired web framework written in Go5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119284: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…N/A6.9 Medium0%Oct 29, 2026
CVE-2026-119283: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…7.5 HighN/A0%Oct 29, 2026
CVE-2026-119282: nrwl, @nx: Nx is a monorepo solution for TypeScript and polyglot codebasesN/A7.3 High0%Oct 29, 2026
CVE-2026-115943: Eval InjectionN/AN/A0%Oct 29, 2026
CVE-2026-61576: lightdash: Lightdash is an open source business intelligence platformN/A8.3 High0%Oct 29, 2026
CVE-2026-13303: HashiCorp: HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential…8.7 HighN/A0%Oct 29, 2026
CVE-2026-119325: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Oct 29, 2026
CVE-2026-119281: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119280: Improper Input Validation3.7 LowN/A0%Oct 29, 2026
CVE-2026-119279: Improper Handling of Length Parameter Inconsistency5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119278: Improper Validation of Array Index5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119277: Out-of-bounds Read5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119276: Improper Handling of Length Parameter Inconsistency5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119210: Improper Input Validation5.9 MediumN/A0%Oct 29, 2026
CVE-2026-119209: Uncontrolled Resource Consumption5.5 Medium7.1 High0%Oct 29, 2026
CVE-2026-119208: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 29, 2026
CVE-2026-119207: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 29, 2026
CVE-2026-119206: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 29, 2026
CVE-2026-119205: Loop with Unreachable Exit ConditionN/A7.1 High0%Oct 29, 2026
CVE-2026-119204: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 29, 2026
CVE-2026-119203: Loop with Unreachable Exit ConditionN/A7.1 High0%Oct 29, 2026
CVE-2026-119202: Inefficient Regular Expression Complexity7.5 HighN/A0%Oct 29, 2026
776-800 of 415735